Security & Testing

sectora.io

Provides threat intelligence and vulnerability management tools for security analysis.

1 endpoint14 known toolsFirst detected July 25, 2026Last detected July 25, 2026

ENDPOINT 1

https://mcp.sectora.io/mcp

No auth detected

MCP server metadata

Name: sectora-mcp-server
Version: 1.0.0

Capabilities

toolsresourcesprompts

Known tools 14

lookup_cve

Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors.

Inferred read-only

assess_tech_risk

Assess security risk for a list of technologies.

Inferred read-only

search_cves

Search for CVEs by keyword, severity, or other filters.

Inferred read-only

get_kev_recent

Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.

Inferred read-only

get_trending_cves

Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.

Inferred read-only

get_weaponization_score

Get the weaponization score (0-100) for a CVE.

Inferred read-only

lookup_ip_reputation

Look up community IP reputation from Sectora Shield WAF network.

Inferred read-only

get_threat_stats

Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits.

Inferred read-only

list_my_findings

List the API key owner's open security findings across all scans.

Inferred read-only

list_my_scans

List the API key owner's recent scans with summary counts.

Inferred read-only

get_scan

Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS).

Inferred read-only

scan_url

Kick off a DAST security scan against a public URL the API key owner controls.

Inferred read-only

get_my_posture

Get Shield WAF posture score and breakdown for a domain registered under this account.

Inferred read-only

assess_dependency

Check a single package@version for known vulnerabilities via OSV.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.sectora-mcp-server]
url = "https://mcp.sectora.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "sectora-mcp-server": {
      "type": "http",
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: sectora-mcp-server
Remote MCP URL: https://mcp.sectora.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "sectora-mcp-server": {
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "sectora-mcp-server": {
      "type": "http",
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "sectora-mcp-server",
  "transport": "streamable-http",
  "url": "https://mcp.sectora.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.